Secunia
Login
|
|
CVE Reference: CVE-2010-3055 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2010-3055 |
|
|
Description: The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA41058 Secunia Advisory: SA41185 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2010:163 DEBIAN http://www.debian.org/security/2010/dsa-2097 CONFIRM http://sourceforge.net/tracker/?func=detail&aid=3045132&group_id=23067&atid=377408 http://www.phpmyadmin.net/home_page/security/PMASA-2010-4.php http://phpmyadmin.git.sourceforge.net/git/gitweb.cgi?p=phpmyadmin/phpmyadmin;a=commitdiff;h=30c83acddb58d3bbf940b5f9ec28abf5b235f4d2 BID 42591 |
|
| Return to the previous page. |
